Systems and methods for preventing an attack on healthcare data processing resources in a hospital information system

Abstract

A system comprising a switching entity disposed between healthcare data processing resources and non-healthcare data processing resources. The switching entity is capable of operation in a first state in which an end user device is communicatively coupled to the healthcare data processing resources to support a healthcare session and a second state in which the end user device is communicatively coupled to the non-healthcare data processing resources to support a non-healthcare session. If the authentication request message is received while the switching entity is operating in the second state and a particular non-healthcare session is in progress, and the selected authentication entity is the healthcare authentication entity, initiating a memory purge at the end user device. Attacks on the healthcare data processing resources, both from the non-healthcare resources directly and via the end user device, are thus prevented.

Description

CROSS-REFERENCES TO RELATED APPLICATIONS[0001]The present application claims the benefit under 35 USC §119(e) of U.S. provisional patent application Ser. No. 60 / 503,965 to Graves, filed Sep. 19, 2003, incorporated by reference herein and U.S. provisional patent application Ser. No. 60 / 505,941 to Graves, filed Sep. 25, 2003, incorporated by reference herein.[0002]The present application claims the benefit under 35 USC §120 of the U.S. patent application Ser. No. 10 / 813,230 entitled “Integrated And Secure Architecture For Delivery Of Communications Services In A Hospital” to Graves et al., filed Mar. 31, 2004, incorporated by reference herein and the U.S. patent application Ser. No. 10 / 813,358 entitled “Systems And Methods For Preserving Confidentiality Of Healthcare Information In A Point-Of-Care Communications Environment” to Graves et al., filed Mar. 31, 2004, incorporated by reference herein.FIELD OF THE INVENTION[0003]The present invention relates generally to communications arch...

AI Technical Summary

Benefits of technology

[0016]In accordance with a first broad aspect, the present invention seeks to provide a system, comprising healthcare data processing resources; non-healthcare data processing resources; a switching entity disposed between the healthcare data processing resources and the non-healthcare data processing resources; and a communication link connected to the switching entity and connectable to an end user device. The switching entity is operative to alt

Problems solved by technology

It is a reality, however, that healthcare institutions have neither sufficient funds nor adequate physical space to deploy customized CPOE terminals based on powerful processors, and containing healthcare applications and healthcare data for each patient at that patient's bedside.

A problem with such conventional approaches is the lack of security arising from the dual-purpose nature of the common terminal.

In particular, there exists the potential threat of a patient or outsider downloading so-called spyware (i.e., malicious software), AAA message collection software or other system-penetration software via non-healthcare sources (such as the Internet), and using the software so downloaded to attack the security or operation of the healthcare applications in the hospital information system.

The impact of a successful penetration of a healthcare resources by a malcontent patient, with or without the aid of the Internet, may potentially put hospital efficiency and patient lives at risk, as well as expose the hospital to the risk of major lawsuits and / or public embarrassment.

Images